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SEQUENCES OF IRREDUCIBLE POLYNOMIALS OVER ODD 
PRIME FIELDS VIA ELLIPTIC CURVE ENDOMORPHISMS, II 


S. UGOLINI 


Abstract. In this paper we extend a previous investigation by us regarding 
an iterative construction of irreducible polynomials over finite fields of odd 
characteristic. In particular, we show how it is possible to iteratively construct 
irreducible polynomials by means of two families of transforms, which we call 
the Qfc and Q^- transforms, related to certain degree two isogenies over elliptic 
curves, which split the multiplication-by-2 map. 


1. Introduction 


Inspired by the Q-transform and the /t-transform (see [T], [2]), in [4] we defined 
the Qfc-transforms over any finite field of odd characteristic as follows. 

If p is an odd prime, q is a power of p and k £ F*, then the Q^-transform takes 
any polynomial / £ F p [a:] of positive degree n to 

/ Qfc (tc)=(|) ■ 

where is the map which takes any element x £ P 1 (F (J ) = F g U { 00 } to 




00 if x = 0 or 00 , 

k ■ (x + a; -1 ) otherwise. 


In we showed how one can construct sequences of irreducible polynomials 
over finite fields by repeated applications of the Qfc-transforms when k and p fall 
into one of the following cases: 


• k = mod p; 


k is a root of x 2 + j and p = 1 (mod 4); 

• k or —k is a root of x 2 + + \ and p = 1, 2, or 4 (mod 7). 

Since the dynamics of the maps seems to be chaotic for any k different from 
the aforementioned values, in this paper we illustrate an iterative construction 
of irreducible polynomials, which is independent of the characteristic of the field 
and employs two families of transforms, namely the Q^-transforms and the Qk- 
transforms, which are below introduced. 

We notice that if k is a quadratic residue in F* and ak is a square root of k 3 in 
F*, then the map dfe is involved in the definition of the isogeny 


ipk(x,y) = \'dk(x),ak- 


x 2 y 


y 


from the elliptic curve 


E 


y 2 = x 3 + x 
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to the elliptic curve 


Ek '■ y 2 = x 3 — Ak 2 x. 

Consider now the map 'dk which takes any element x E P 1 (F g ) to 


tffc(z) 


oo 


x 2 —4k 2 
4 kx 


if x = 0 or oo, 
otherwise, 


and the Qfc-transform, which takes any polynomial / E F p \x\ of positive degree n 
to 

f® k {x) = (4 kx) n ■ f{d k {x)). 

The map 'dk is involved in the definition of the isogeny 


^ k(x,y) 



y(x 2 + 4fc 2 )\ 
8a k x 2 ) 


from E k to E, namely the dual isogeny of i/’fe- If we denote by [2] the duplication 
map on E, then 

[ 2 ] = ■tpk oip k . 

While the isogenies i/’fc and ■ip k have been defined only for the quadratic residues 
k in F*, the construction of sequences of irreducible polynomials, which is described 
in Section [3j can be carried over to any k E F* , as explained in Remark 12.11 


2. Preliminaries 


Let F g be a finite field of odd characteristic p. 

The structure of the group E(F q ) of rational points of E over F 9 depends upon 
p. In fact, if p = 1 (mod 4), then E is an ordinary elliptic curve, while E is 
supersingular if p = 3 (mod 4) (see [51 Proposition 4.37]). 

Whichever p is, we can consider the map [2] defined over P 1 (F 9 ) as 


[2] : x i-t 


oo 

x 4 -2x 2 + 1 

4(ai 3 +ai) 


if x E {0, i p , oo}, 

otherwise, 


where i p is a square root of —1 in F p . 

For any x E P 1 (F g ) and any quadratic residue fc S F* we have that 


[2](x) = dki’dkix)). 


( 2 . 1 ) 


Remark 2.1. While in the current section k is assumed to be a quadratic residue in 
F*, we notice that [2] = flk ° "®k whichever k E F* we take. This fact will let us to 
extend our iterative construction of irreducible polynomials in Section [3] to any k. 

We can construct the functional graph Gjb of [2] over P 1 (F g ), where the vertices 
are the elements of P 1 (F 9 ) and an arrow joins a vertex a to a vertex (3 if /3 = 
[2](a). Since any vertex of is either [2]-periodic or preperiodic, any connected 
component of G^ contains exactly one cycle, whose vertices are roots of reversed 

trees. In the following, for any non-negative integer i and any [2]-periodic element 

2 ® 2 * 

xo G P 1 (Fg), we denote by Ti, (a^o) the reversed tree of rooted in xq. 

The following holds. 





Lemma 2.2. If x G P 1 (F q ), then 
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IP 6 P'(F.) : [2]M = i(l = r ^ € {± '” 0) ’ 

4 otherwise. 


Proof. We introduce the following notations for any xq £ P 1 (F 9 ): 


= {leP'W 

4'W = 

[2] _I {®o} = 


tfk(x) = zo}; 
tfk(x) = x 0 }; 
[2] (a;) = x 0 }- 


We have that 


IVWI 


l^oll = 


1 if xq £ {±2 k}, 

2 otherwise, 

1 if .To £ {±i p }, 

2 otherwise. 


Moreover, 


i?fc{±2 ki p } = {±ip}, 

A{±2k} = { 0 }. 

We can now analyse the different cases. 

• If x £ P 1 (F g )\{±* p , 0}, then = {xi,x 2 }> where {xi, x 2 } H {±2fc} = 


9. Therefore, 


= 4. 


[ 2 ] {x} 

If x £ {±* P }, then 'dfe 1 {i} = {2kx}. Therefore, [2] 1 {x} 


= 2 . 


• If x = 0, then S k 1 {x} = {±2fc}. Therefore, 
All considered, the result follows. 


[2] _1 {i} 


= 2 . 


□ 


According to Lemma T2.21 the following holds. 


i ~ 

Corollary 2.3. Let xq £ P 1 (F„) be [2 ]-periodic. Then, Tl (x’o) is a 4-ary tree for 
any non-negative integer i. 

Example 2.4. Below is represented the graph Gfi.. As regards the labels of the 

l 2 \ 

nodes, ‘0’ is the zero in F 4 g, while all the other labels different from oo refer to the 
exponents of the powers a 1 , being a a generator of the held F 49 . We notice that 
every node, which is not a leaf, has exactly 4 children, except for 12, 36 and ‘O’. 
This fact is in accordance with Lemma 12.21 since (a 12 ) 2 = (a 36 ) 2 = —1. 
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2.1. The ordinary case. In [3] Section 3] and in |4j Section 2.1], relying upon [6], 
we studied some properties of the group of rational points of E over a finite field. 
We summarize the relevant facts for the reader’s convenience. 

Let m be a positive integer, l a non-negative integer and q = p 2 m . If we set 
R = Z [*] and denote by tt p the representation in R of the Frobenius endomorphism 
of E, then 

E{ F p2im ) £* R/(ir 2 p ‘ m - 1 )R S R/pl'R x R/ Pl R, 

where po = 1 + i, e; is a non-negative integer which depends on l and pi is an 
element of R coprime to po such that pg • Pi = n 2 m — 1. According to [U, Lemma 
2.13 (1), (4)], the following holds. 
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Lemma 2.5. We have that 

• ei > 2; 

• et = ei -1 + 2, if l > 2. 


Since [2] = ‘ipk ° ipk and 2 = — * • p^ in R , we can prove the forthcoming result 

concerning the depth of the trees rooted in [2]-periodic elements of G'L,. 

l 2 \ 

Theorem 2.6. Let xq G P 1 (F ? ) he [2 \-periodic. Then, 

(1) Ti. ( xq ) has depth d := and its leaves have height at least d — 1; 

2 i _ 2 l + 1 

(2) the children of the leaves of Tj~] (xo) in P 1 (F 9 ) are leaves of (xo), 

for any positive integer i. 


Proof. (1) The dynamics of [2] over P 1 (F ? 2 ) can be studied relying upon the iter¬ 
ations of [2] = [— ipg] in 

R/(rf l+lm -1)RS*S = R/Po +1 R x R/ Pl R. 


( 2 ) 


By hypothesis, Xo G P 1 (F g ). Therefore, either Xo = oo or (xo,yo) G P(F g 2 ), 
for some yo G F g 2 . In both cases, the corresponding point Q in S is of the form 

Q = ( 0 , Qi). 

Consider the point P = ([1], [2]~ d Q\) G S. Then, [2] d P = Q , while [2] ,l P ^ 

Q for any positive integer h < d. More in general, if (Po,Pi) G S, then 

[2] d P 0 = 0 in R/p e 0 l+1 R. Hence, Ti (xo) has depth d. 

[ 2 \ 

2 

Let now x be a leaf of Ti-(x o). Suppose that P = (Po,Pi) is the point 
in S having such a x-coordinate and that Pq = [a] for some a G R. Then, 
Pq \ a. Indeed, if a = p^c for some c G P, then we could take the point 
P = ([*c], [2] _1 Pi) and notice that [2]P = P, which is absurd, since x is a 
leaf of the tree. Consequently, if [2] ft Po = 0 for some positive integer h , then 


Consider a leaf x of Ti (xo), for some positive integer i. Let x' be one of the 
[ 2 \ 

2 *+! 

direct predecessors of x in Ti (xo). Since the greatest power of po which 

i 2 \ 

divides 7r 2 ^ — 1 is ej+j+i and = ej+j + 2 according to Lemma \2 . 5 1 

2 i+i 

we have that x' is a leaf of Ti (xo). 

l 2 \ 

□ 


2.2. The supersingular case. Let i and m be two positive integers. Then, ac¬ 
cording to ED Theorem 4.1], 

E(F p2im ) - Z/d-pf- 1 ™ - 1)Z x Z/((-pf~ lm - 1)Z. 

The following holds. 

Lemma 2.7. There exist two positive integers e,;_i and e, and two odd integers r 
and s such that 

(-p) 2 ‘“ lm - 1 = 2 e< -» • r, 

(_p) 2i m _ i = 2 e * • s. 

Moreover, e, = ei_i + 1. 
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Proof. Since —p=l (mod 4), we have that 

{-p) T ~ lm - 1 = 0 (mod 4), 

{-P) 2i ~ lm +1 = 2 (mod 4). 

Therefore, 

{-pf- 1 ™ - 1 = 2 ei - 1 • r, 

(-pf~ lm + 1 = 2 V, 

for some integer e;_i > 2 and some odd integers r and r' . Hence, 

(-p) 2 * m - f = ((- p) 2i ~ lm - 1) • ((- p) 2i ~ lm + 1) = 2 ei ~ 1+1 ■r-r '. 

The result follows setting a = ei-\ + 1 and s = r • r'. □ 

According to Lemma 12.71 if we set q = p m , then 

E{F q2i ) £*St = (Z/2 e< - 1 Z x Z/rZ) 2 . 

The following holds. 

Theorem 2.8. Let xo £ P 1 (F 9 ) &e [2]-penod*c. ITien 
2 i 

(1) Ti (x 0 ) has depth ej_i; 

(2) the children of the leaves of (xo) in P 1 (F g ) are leaves of (xo). 

Proof. (1) Since xo is [2]-periodic in P 1 (F 9 ), it is the x-coordinate of a rational 
point in E(F q2 *), which corresponds to a point in Si of the form 

([0], [a r ], [0], [b r ]) 

for some integers a r and b r . We notice that ej_i is the smallest positive integer 
k such that [2][c] = [0] for any [c] in Z/2 6i - 1 Z. Indeed, any leaf of Ti (xo) is 
the x-coordinate of a point 

(H,[2]-^-[a r ],[6 2 ],[2]^-[6,]) 

in Si for some integers a 2 and & 2 which are not both divisible by 2 in Z. 

2 i 2 i + 1 

Therefore, the tree Ti (xo) has depth e,_i and, in analogy, Ti (xo) has 
l-“I l“J 

depth e*. 

2 i 2 i + 1 
(2) Any leaf of Ti. (xo) lies on the level ej_i of the tree Ti (xo), which has 

2 i+i 

depth ej. Consequently, its children are leaves of Ti. (x’o). 

[ 2 \ 

□ 

Example 2.9. Let q = 7 2 . Then, 

E(F 72 ) 3* Z/(—8)Z x Z/(—8)Z. 

According to Theorem 12.81 any [2]-periodic element xo £ P 1 (F 4 g) is root of a tree 
having depth 3. This is the case of oo, as we can see in Example 12.41 
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3. Constructing sequences of irreducible polynomials 

Let / be a monic irreducible polynomial of positive degree n belonging to F p [x], 
for some odd prime p , and set q = p n . For a fixed k £ F* we can construct two 
sequences {.%}i>o and {hi}i >o of monic irreducible polynomials as follows. 

• We set go : = / and h 0 := f. 

• We set g\ := f Qk and hi := f Qk , if f Qk is irreducible. Otherwise, we set 
gi equal to one of the two monic irreducible factors of f® k and h\ equal to 
the other factor. 

• For any positive integer i we set gi (resp. hi) equal to 

— one of the monic irreducible factors of gf\ (resp. hf\), if i is odd; 

— one of the monic irreducible factors of gf\ (resp. h®\), if i is even. 

Remark 3.1. We notice in passing that if / G F p [x] is irreducible of degree m, then 

either f® k (resp. f® k ) is irreducible of degree 2m, or it splits into the product of 

two irreducible factors of degree m. Indeed, if a is a root of f Qk (resp. f® k ), then 
f(dk{a)) = 0 (resp. /(i9fc(a)) = 0). Hence, either a has degree 2m or it has degree 
m over F p . 

The following holds. 

Lemma 3.2. If x is a root of f in F q , then 

(1) x belongs to the level r of the tree ( Xq ), for some non-negative integer r 

and xo £ P 1 (F 9 ); 

(2) for any positive integer j, either any polynomial g 2 j or any polynomial h 2 j 

2 i 

has a root Xj belonging to the level r + j of the tree Tj|] ( Xq ) for some 
non-negative integer i. 

Proof. We prove separately the two assertions. 

(1) The assertion holds because any element in P 1 (F 9 ) is either [2]-periodic or 
preperiodic. In the former case xq = x, while in the latter case some iterate 
of x is [2]-periodic and we set Xq equal to the first of such iterates which is 
[2]-periodic. 

(2) The assertion can be proved by induction on j. 

First we define g := g® k . We notice that g 2 and h .2 are factors of g® k . Since 
[2] =4°^) the (at most) 4 preimages of x with respect to the map [2] in 
P 1 (F g ) are roots of g^ k . Moreover, at most one of the preimages is [2]-periodic. 
Therefore, without loss of generality, we can suppose that g 2 has a root which 
is not [2]-periodic. If we denote by x\ such a root, then the base step is proved. 

As regards the inductive step, suppose that g 2 j has a root Xj belonging to 

2 i 

the level r + j of the tree Ti , (a;o) for some positive integers i and j. Using 

[Z\ 

the same argument as above, we can define g := g® k and notice that g 2 j +2 is 

2i+1 

a factor of g^ k . Therefore, the preimages of Xj in T j| (cco) are roots of g® k . 
One of the preimages, which we denote by Xj+i , is a root of c/2.7+2 and the 
inductive step is proved. 

□ 
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We discuss the ordinary and the supersingular case separately. 


3.1. Ordinary case: p = 1 (mod 4). Suppose that 7r^ 71 — 1 = p^ 1 ■ pi, for some 
positive integer e± and some element pi £ R coprime to pq. The following holds. 


Theorem 3.3. There exists a positive integer t < 
the following holds: 

• g t +2j-i and gt+2j have degree 2 1+ -? • n for any integer j > 1; 

• ht+ 2 j-i and ht+ 2 j have degree 2 1+ - 7 • n for any integer j > 1. 


such that at least one of 


Proof. Adopting the notations of Section [All let m = n, q = p m and 1 = 0. In 
accordance with Lemma l3.2f 21. we can say without loss of generality that, for any 
positive integer j, any polynomial g 2 j has a root belonging to the level r + j of the 


tree (a"o), for some xo € P 1 (F 9 ) and for some non-negative integer i. According 

2 r d 1 

to Theorem l2.6IT h the tree (a"o) has depth — . Let t be the smallest index 2 j 
such that g 2 j has a root in F q 2 , while g 2 j +2 has a root in F g2 2 . The result follows 
because the degree of gt+2j is twice the degree of gt+2(j-i) f° r any integer j > 1 
and the result follows according to Theorem 12.61 21. □ 


3.2. Supersingular case: p = 3 (mod 4). Suppose that p = 3 (mod 4) and that 
(— p) n — 1 = 2 e ° • r, for some integers eo and r. The following holds. 


Theorem 3.4. There exists a positive integer t < eo such that at least one of the 
following holds: 

• g t + 2 j-\ and gt+2j have degree 2 1+ - ? • n for any integer j > 1; 

• h t + 2 j-i and ht+ 2 j have degree 2 1+ - 7 • n for any integer j > 1. 

Proof. The current theorem can be proved as Theorem 13.31 reiving upon Theorem 
12.81 and Lemma liL2l □ 
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